Solved

copy url from application pages

Posted on 2004-10-08
5
117 Views
Last Modified: 2013-12-24
I have an application that people need to log into.  If you log in and then go to the address bar - you copy the url - close the browser (this ends the session) Open IE and then paste the copied url into the address bar - you get right into the application - no login screen!  Anyone know why the application.cfm is not controlling this?
Thanks!
0
Comment
Question by:ahillman
5 Comments
 
LVL 5

Expert Comment

by:smaglio81
ID: 12262671
I am not sure. These types of things sometimes have a variety of causes. I think it might help narrow down the possibilities if we had a better idead of what was going on in Application.cfm. What kind of verification algorithm are you using. Did you write your own session management code, or are you using <cflogin>/<cflogout>?

Steven
0
 
LVL 6

Expert Comment

by:reitzen
ID: 12262853
We store the session info in the client scope and the session scope and compare each call via the application.cfm.  If the two values don't match, we assume the user has closed their browser and need to login again.

application.cfm
<cfif Client.browserSession NEQ session.SessionID>
  <cflocation url="login.cfm">
</cfif>

Once the user has been authenticated in the login.cfm
<cfif IsDefined("cookie.jsessionid")>
  <cfset Client.browserSession = cookie.jsessionid>
</cfif>

HTH
0
 
LVL 17

Expert Comment

by:Tacobell777
ID: 12263012
yes, because the user did not log out, i.e. the variables still exist
closing the browser does not end the session, the session variables still exist in memory on the server - users accesses the application again and the cookie still exists on the users machine, so its just like they never been gone.

You can set cookies to expire when the browser closes, and when they access the application again it should not let them in, however the session variables still exists in memory on the server if they have not explicitly been destroyed (ofcourse they will time out after the period defined in the application tag)..
0
 
LVL 17

Accepted Solution

by:
Tacobell777 earned 125 total points
ID: 12263026
0
 

Author Comment

by:ahillman
ID: 12275313
Makes lots of sense - I was under the impression that the session is killed when the browser is closed - wrong assumption obviously.  So - lets say i decided to bookmark or save a url that would take me directly into the application at a later date.  This wouldn't work after the session has ended on my server correct?  Good to know.  If I wanted to have the session end when the browser is closed and have the cookie go away at the same time - what would be the proper coding? This isn't a security risk for this particular application but could be for another one that is in the works.
Thanks!
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Article by: kevp75
Hey folks, 'bout time for me to come around with a little tip. Thanks to IIS 7.5 Extensions and Microsoft (well... really Windows 8, and IIS 8 I guess...), we can now prime our Application Pools, when IIS starts. Now, though it would be nice t…
Periodically we have to update or add SSL certificates for customers. Depending upon your hosting plan you may be responsible for the installation and/or key generation. In the wake of Heartbleed many sites were forced to re-key. We will concen…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Learn how to create flexible layouts using relative units in CSS.  New relative units added in CSS3 include vw(viewports width), vh(viewports height), vmin(minimum of viewports height and width), and vmax (maximum of viewports height and width).

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now